Invalid IP response connecting to API using IPv6 address

[gohigher]

I encountered a customer's installation that presented a new one for me.

 

I updated the customer's system from 5.2.7 to 5.2.10 (incrementally, 5.2.8, 5.2.9...) and the API interface no longer authenticated the API user.

 

Aside from the upgrade, nothing else has changed.

 

The error returned by the API interface simply read "Invalid IP" whereas every other time I've encountered this WHMCS' API kindly returns the offending IP address. This time no.

 

I suspect that input filtering is being done on ALL the variables at the moment of initialization now, and that an IPv6 address containing colons `:` is being wiped from the server array. This would explain no IP address being returned back to the client.

 

My workaround is fine for now, simply activating and utilizing an API Access Key to bypass the IP restriction, but thought I'd bring it to everyone's attention and possibly added to the bug list.